968 Commits (0efaf514d72373fa3b10688f2b3975982fbebf99)

Author	SHA1	Message	Date
Shulhan	fe04f93d7f	all: reformat all go files with the next gofmt (Go 1.19) ... There are some changes that manually edited, for example using '-' as default list and grouping imports.	2 years ago
Mariano Cano	9c049eec5a	Add revoke ssh unit test	2 years ago
Mariano Cano	ce9a23a0f7	Fix SSH certificate revocation	2 years ago
Mariano Cano	911cec21da	Merge pull request #943 from smallstep/ssh-renew-provisioner ... Add provisioner to SSH renewals	2 years ago
Mariano Cano	94f5b92513	Use proper context in authority package	2 years ago
Mariano Cano	1be74eca62	Merge branch 'master' into ssh-renew-provisioner	2 years ago
Mariano Cano	26dd97e718	Merge branch 'master' into context-authority	2 years ago
Mariano Cano	6b3a8f22f3	Add provisioner to SSH renewals ... This commit allows to report the provisioner to the linkedca when a SSH certificate is renewed.	2 years ago
Mariano Cano	3c4d0412ef	Merge pull request #941 from smallstep/ssh-provisioner ... Report SSH provisioner	2 years ago
Max	f8148071fb	Merge pull request #915 from smallstep/max/removing-beta ... exposing authority configuration for provisioner cli commands	2 years ago
max furman	5443aa073a	gofmt -s	2 years ago
Max	586e4fd3b5	Update authority/options.go ... Co-authored-by: Mariano Cano <mariano@smallstep.com>	2 years ago
Mariano Cano	dd985ce154	Clarify errors when sending renewed certificates	2 years ago
Mariano Cano	a627f21440	Fix AuthorizeSSHSign tests with extra SignOption	2 years ago
Mariano Cano	e7d7eb1a94	Add provisioner as a signOption for SSH	2 years ago
Mariano Cano	293586079a	Store provisioner with SignSSH ... This change also allows to store the old certificate on renewal on linkedca or if the db interface supports it.	2 years ago
Mariano Cano	c8d7ad7ab9	Fix store certificates methods with new interface	2 years ago
Mariano Cano	de99c3cac0	Report provisioner and parent on linkedca	2 years ago
Herman Slatman	479eda7339	Improve error message when client renews with expired certificate ... When a client provides an expired certificate and `AllowAfterExpiry` is not enabled, the client would get a rather generic error with instructions to view the CA logs. Viewing the CA logs can be done when running `step-ca`, but they can't be accessed easily in the hosted solution. This commit returns a slightly more informational message to the client in this specific situation.	2 years ago
max furman	bfb406bf70	Fixes for PR review	2 years ago
Mariano Cano	898ca41268	Merge branch 'master' into context-authority	2 years ago
Herman Slatman	c695b23e24	Fix check for admin not belonging to policy	2 years ago
max furman	25b8d196d8	Couple changes in response to PR ... - add skipInit option to skip authority initialization - check admin API status when removing provisioners - no need to check admins when not using Admin API	2 years ago
Mariano Cano	8942422973	Add GetID() and add authority to initial context	2 years ago
Mariano Cano	1e03bbb1af	Change types in the ACMEAdminResponder	2 years ago
Mariano Cano	f639bfc53b	Use contexts on the new PolicyAdminResponder	2 years ago
Mariano Cano	d461918eb0	Merge branch 'master' into context-authority	2 years ago
Herman Slatman	0f4ffa504a	Fix linting issues	2 years ago
Herman Slatman	7104299119	Add full policy validation in API	2 years ago
Herman Slatman	105211392c	Don't rely on linkedca model stability in API response bodies	2 years ago
Herman Slatman	5e9bce508d	Unexport GetPolicy()	2 years ago
Herman Slatman	60d8b22d89	Change context retrievers to MustTFromContext	2 years ago
Mariano Cano	43ddcf2efe	Do not use deprecated AuthorizeSign	2 years ago
Mariano Cano	9147356d8a	Fix linter errors	2 years ago
Mariano Cano	a8a4261980	Fix authority/admin/api tests	2 years ago
Herman Slatman	77893ea55c	Change authority policy to use dbPolicy model	2 years ago
max furman	4cb74e7d8b	fix linter warnings	2 years ago
Herman Slatman	d82e51b748	Update AllowWildcardNames configuration name	2 years ago
Herman Slatman	2b7f6931f3	Change Subject Common Name verification ... Subject Common Names can now also be configured to be allowed or denied, similar to SANs. When a Subject Common Name is not explicitly allowed or denied, its type will be determined and its value will be validated according to the constraints for that type of name (i.e. URI).	2 years ago
Mariano Cano	00f181dec3	Use contexts in admin api handlers	2 years ago
Mariano Cano	623c296555	Create context methods from admin database	2 years ago
Mariano Cano	48e2fabeb8	Add authority.MustFromContext	2 years ago
Mariano Cano	9628fa3562	Add methods to store and retrieve an authority from the context.	2 years ago
Herman Slatman	bddd08d4b0	Remove "proto:" prefix from bad proto JSON messages	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	2a7620641f	Fix more PR comments	2 years ago
Herman Slatman	76112c2da1	Improve error creation and testing for core policy engine	2 years ago
max furman	b91affdd34	exposing authority configuration for provisioner cli commands	2 years ago
Herman Slatman	20f5d12b99	Improve test rigour for reloadPolicyEngines	2 years ago
Herman Slatman	6264e8495c	Improve policy error handling code coverage	2 years ago